[OFBIZ-12766] CVE-2023-24998 Apache Commons FileUpload and Tomcat - DoS with excessive parts

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 22.01.01
• Fix Version/s: 22.01.01
• Component/s: framework/security, tomcat
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 21/Feb/23 07:57
• Updated: 21/Feb/23 08:24
• Resolved: 21/Feb/23 08:24

Description

See
https://commons.apache.org/proper/commons-fileupload/security-reports.html
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.71